From 2132052bdced357ea36433658f49b6e3a1f8665c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 18 Aug 2026 05:22:34 +0000
Subject: [PATCH] chore(deps): bump the github-actions-major group with 3
 updates

Bumps the github-actions-major group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python) and [actions/setup-go](https://github.com/actions/setup-go).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

Updates `actions/setup-python` from 6 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v6...v7)

Updates `actions/setup-go` from 6.5.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v6.5.0...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/cursor-review-catalog-drift.yml | 2 +-
 .github/workflows/cursor-review.yml               | 4 ++--
 .github/workflows/refresh-reviewers.yml           | 6 +++---
 .github/workflows/test-refresh-reviewers.yml      | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/cursor-review-catalog-drift.yml b/.github/workflows/cursor-review-catalog-drift.yml
index 44d6cc3e..4c8476a1 100644
--- a/.github/workflows/cursor-review-catalog-drift.yml
+++ b/.github/workflows/cursor-review-catalog-drift.yml
@@ -72,7 +72,7 @@ jobs:
       urgent: ${{ steps.drift.outputs.urgent }}
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/cursor-review.yml b/.github/workflows/cursor-review.yml
index 368380db..4feaddef 100644
--- a/.github/workflows/cursor-review.yml
+++ b/.github/workflows/cursor-review.yml
@@ -390,7 +390,7 @@ jobs:
       - name: Load cursor-review assets
         continue-on-error: true
         timeout-minutes: 5
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: Comfy-Org/github-workflows
           # This job must never fail (see the job comment), so an empty-ref
@@ -542,7 +542,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Go
-        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e  # v7.0.0
         with:
           go-version-file: _pr_size_tool/scripts/check-pr-size/go.mod
           # Dependency-free module (no go.sum) — nothing to cache.
diff --git a/.github/workflows/refresh-reviewers.yml b/.github/workflows/refresh-reviewers.yml
index c9c6f99b..83b80db7 100644
--- a/.github/workflows/refresh-reviewers.yml
+++ b/.github/workflows/refresh-reviewers.yml
@@ -170,7 +170,7 @@ jobs:
           private-key: ${{ secrets.CLOUD_CODE_BOT_PRIVATE_KEY }}
 
       - name: Checkout caller repo (full history)
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # Full history IS the input signal for the expertise scoring.
           fetch-depth: 0
@@ -207,7 +207,7 @@ jobs:
         # The generator comes from THIS repo (public, pinned via
         # workflows_ref), never from the caller's checkout, so a caller-side
         # change can't rewrite the scoring logic.
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: Comfy-Org/github-workflows
           ref: ${{ inputs.workflows_ref }}
@@ -215,7 +215,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: '3.12'
 
diff --git a/.github/workflows/test-refresh-reviewers.yml b/.github/workflows/test-refresh-reviewers.yml
index 4ddece93..c62a7f65 100644
--- a/.github/workflows/test-refresh-reviewers.yml
+++ b/.github/workflows/test-refresh-reviewers.yml
@@ -26,12 +26,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'